Quantifying Reactor Safety Margins